WordPress Emag Marketplace Connector plugin 1.0 - Unauthenticated Cross-Site Scripting (XSS) vulnerability

Unauthenticated Cross-Site Scripting XSS vulnerability found by Ricardo Sanchez in WordPress Emag Marketplace Connector plugin version 1.0. Solution Update the WordPress Emag Marketplace Connector plugin to the latest available version at least 1.0.1...

SA157: OpenSSL Vulnerabilities 28-Aug-2017 and 2-Nov-2017

SUMMARY Symantec Network Protection products using affected versions of OpenSSL are susceptible to several vulnerabilities. A remote attacker can send a crafted X.509 certificate to cause unspecified impact. They can exploit, under certain circumstances, a computational flaw in the Montgomery...

WordPress Emag Marketplace Connector Plugin Cross-Site Scripting Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform using PHP language development, the platform supports in PHP and MySQL servers to set up a personal blog site.Emag Marketplace Connector plugin is used in which a can be WooCommerec store and the The eMAG Marketplace...

CVE-2017-17043

The Emag Marketplace Connector plugin 1.0.0 for WordPress has reflected XSS because the parameter "post" to /wp-content/plugins/emag-marketplace-connector/templates/order/awb-meta-box.php is not filtered correctly...

Cross site scripting

The Emag Marketplace Connector plugin 1.0.0 for WordPress has reflected XSS because the parameter "post" to /wp-content/plugins/emag-marketplace-connector/templates/order/awb-meta-box.php is not filtered correctly...

CVE-2017-17043

The CVE-2017-17043 entry corresponds to a reflected XSS in WordPress Emag Marketplace Connector plugin version 1.0.0. The vulnerability is triggered by an unfiltered post parameter passed to /wp-content/plugins/emag-marketplace-connector/templates/order/awb-meta-box.php, enabling script execution...

CVE-2017-17043

The Emag Marketplace Connector plugin 1.0.0 for WordPress has reflected XSS because the parameter "post" to /wp-content/plugins/emag-marketplace-connector/templates/order/awb-meta-box.php is not filtered correctly...

CVE-2017-17043: Improper Neutralization of Input During Web Page Generation

The Emag Marketplace Connector plugin 1.0.0 for WordPress has reflected XSS because the parameter "post" to /wp-content/plugins/emag-marketplace-connector/templates/order/awb-meta-box.php is not filtered correctly...

PT-2017-14679

Name of the Vulnerable Software and Affected Versions Emag Marketplace Connector plugin version 1.0.0 Description The issue is related to reflected XSS. The parameter post to the API endpoint "/wp-content/plugins/emag-marketplace-connector/templates/order/awb-meta-box.php" is not filtered...

WordPress Emag Marketplace Connector 1.0 Cross Site Scripting Vulnerability

Exploit for php platform in category web applications Class Input Validation Error Remote Yes Credit Ricardo Sanchez Vulnerable Emag Marketplace Connector 1.0 Emag Marketplace Connector Plugin is prone to a stored cross-site scripting vulnerability because it fails to sufficiently sanitize...

WordPress Emag Marketplace Connector 1.0 Cross Site Scripting

Class Input Validation Error Remote Yes Credit Ricardo Sanchez Vulnerable Emag Marketplace Connector 1.0 Emag Marketplace Connector Plugin is prone to a stored cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to...

Emag Marketplace Connector 1.0 - Unauthenticated Cross-Site Scripting (XSS)

The Emag Marketplace Connector WordPress plugin was affected by an Unauthenticated Cross-Site Scripting XSS security vulnerability. PoC http://www.example.com/wp-content/plugins/emag-marketplace-connector/templates/order/awb-meta-box.php?post= "/...

Emag Marketplace Connector 1.0 - Unauthenticated Cross-Site Scripting (XSS)

The Emag Marketplace Connector WordPress plugin was affected by an Unauthenticated Cross-Site Scripting XSS security vulnerability. http://www.example.com/wp-content/plugins/emag-marketplace-connector/templates/order/awb-meta-box.php?post= "/alert"XSS"...

JanTek JTC-200 RS232-NET Connector CSRF / Missing Authentication

Vendor: JanTek Equipment: JTC-200 Vulnerabilities: Cross-site Request Forgery, Improper Authentication Advisory URL: https://ipositivesecurity.com/2017/10/28/ics-jantek-jtc-200-rs232-net-converter-advisory-published/ ICS-CERT Advisory https://ics-cert.us-cert.gov/advisories/ICSA-17-283-02 CVE-ID...

MGASA-2017-0382 Updated mysql-connector-java packages fix security vulnerabilities

Thijs Alkemade discovered that unexpected automatic deserialisation of Java objects in the MySQL Connector/J JDBC driver may result in the execution of arbitary code CVE-2017-3523. Two vulnerabilities have been found in the MySQL Connector/J JDBC driver CVE-2017-3586, CVE-2017-3589...

Updated mysql-connector-java packages fix security vulnerabilities

Thijs Alkemade discovered that unexpected automatic deserialisation of Java objects in the MySQL Connector/J JDBC driver may result in the execution of arbitary code CVE-2017-3523. Two vulnerabilities have been found in the MySQL Connector/J JDBC driver CVE-2017-3586, CVE-2017-3589...

Design/Logic Flaw

The Cisco AMP For Endpoints application allows an authenticated, local attacker to access a static key value stored in the local application software. The vulnerability is due to the use of a static key value stored in the application used to encrypt the connector protection password. An attacker...

PT-2017-12489

Name of the Vulnerable Software and Affected Versions Cisco AMP For Endpoints affected versions not specified Description The issue allows an authenticated, local attacker to access a static key value stored in the local application software. This is due to the use of a static key value stored in...

CVE-2017-14937

The airbag detonation algorithm allows injury to passenger-car occupants via predictable Security Access SA data to the internal CAN bus or the OBD connector. This affects the airbag control units aka pyrotechnical control units or PCUs of unspecified passenger vehicles manufactured in 2014 or...

CVE-2017-14937

The airbag detonation algorithm allows injury to passenger-car occupants via predictable Security Access SA data to the internal CAN bus or the OBD connector. This affects the airbag control units aka pyrotechnical control units or PCUs of unspecified passenger vehicles manufactured in 2014 or...